added headers by spring security 3.2 #134